This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/kusmDsO8Uw_ySSs2hEPQ-H13FYM.roa File: kusmDsO8Uw_ySSs2hEPQ-H13FYM.roa (raw, json) Hash identifier: 1rGB+aRAXuMa2bU+lVn68pSMVNrMTSXd48nfTvzXVGk= Subject key identifier: 92:EB:26:0E:C3:BC:53:0F:F2:49:2B:36:84:43:D0:F8:7D:77:15:83 Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310 Certificate serial: 019AFE8F83E3C83F88C79BAC76C3AEB9B4FE Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/kusmDsO8Uw_ySSs2hEPQ-H13FYM.roa Signing time: Mon 08 Dec 2025 15:23:29 +0000 ROA not before: Mon 08 Dec 2025 15:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12912 IP address blocks: 37.30.0.0/15 maxlen: 17 37.30.0.0/19 maxlen: 19 37.30.32.0/19 maxlen: 19 37.30.96.0/19 maxlen: 19 46.204.0.0/15 maxlen: 15 46.204.0.0/19 maxlen: 19 46.204.32.0/19 maxlen: 19 46.204.64.0/19 maxlen: 19 46.204.96.0/19 maxlen: 19 46.205.128.0/19 maxlen: 19 46.205.192.0/20 maxlen: 20 46.205.208.0/20 maxlen: 20 46.205.216.0/21 maxlen: 21 46.205.224.0/20 maxlen: 20 46.205.240.0/21 maxlen: 21 62.152.128.0/19 maxlen: 19 83.220.96.0/19 maxlen: 19 83.220.101.0/24 maxlen: 24 178.180.0.0/14 maxlen: 14 178.182.0.0/18 maxlen: 18 178.183.0.0/18 maxlen: 18 178.183.32.0/24 maxlen: 24 188.146.0.0/15 maxlen: 15 188.146.0.0/16 maxlen: 17 188.146.0.0/18 maxlen: 18 188.146.0.0/19 maxlen: 19 188.146.32.0/19 maxlen: 19 188.146.64.0/19 maxlen: 19 188.146.128.0/19 maxlen: 19 188.146.192.0/19 maxlen: 19 188.147.0.0/19 maxlen: 19 188.147.0.0/22 maxlen: 22 188.147.64.0/18 maxlen: 18 188.147.64.0/19 maxlen: 19 188.147.96.0/19 maxlen: 19 188.147.192.0/19 maxlen: 19 213.158.192.0/19 maxlen: 19 2001:1b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:8f:83:e3:c8:3f:88:c7:9b:ac:76:c3:ae:b9:b4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310 Validity Not Before: Dec 8 15:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92eb260ec3bc530ff2492b368443d0f87d771583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:05:47:95:70:41:6c:a6:ae:9e:33:41:35: ec:53:2b:cc:7a:03:3e:d5:04:ad:77:cb:b6:61:74: 63:3b:4d:03:c8:db:1e:17:15:35:4e:e2:a4:81:3a: d0:51:d4:7a:58:b2:ac:59:be:59:87:38:37:9f:30: 56:d8:1f:1b:70:33:1b:34:1a:39:e4:b6:f6:51:f8: be:bd:45:2c:f9:9a:62:c0:d8:91:9c:fd:68:bc:51: 47:5d:d9:56:8e:89:79:fd:6b:56:54:04:c4:81:d0: c2:f8:44:6f:db:24:31:5d:fa:f5:ee:ce:37:3d:c4: a9:08:8e:4f:1c:5e:28:9f:bf:1a:84:6b:dd:04:4e: e6:b5:0e:30:61:aa:df:2a:92:2c:96:83:9d:37:71: 66:09:c7:18:22:5d:4e:d1:22:fc:d0:55:c7:bd:dc: 71:87:5c:c7:cb:21:ad:5f:5b:cc:2d:93:22:05:37: 28:3d:ec:5c:b1:d2:53:31:00:60:57:1a:ae:9d:47: 5b:40:bd:d7:9f:d6:7a:a4:a9:2b:d3:66:ee:81:a5: 7d:00:7d:2d:47:dc:d3:99:6f:16:04:d8:cd:4e:9c: 69:3a:d7:a6:32:74:75:bb:5c:ba:94:71:30:e2:85: 4a:ce:06:d9:c0:fb:31:0a:d1:15:d1:d8:37:06:33: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EB:26:0E:C3:BC:53:0F:F2:49:2B:36:84:43:D0:F8:7D:77:15:83 X509v3 Authority Key Identifier: keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/kusmDsO8Uw_ySSs2hEPQ-H13FYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.30.0.0/15 46.204.0.0/15 62.152.128.0/19 83.220.96.0/19 178.180.0.0/14 188.146.0.0/15 213.158.192.0/19 IPv6: 2001:1b80::/29 Signature Algorithm: sha256WithRSAEncryption 2a:c9:45:d7:4c:4a:e2:7f:57:9c:0d:f9:fc:ce:89:bb:93:cc: 37:ba:c6:08:b1:00:a3:60:e0:a3:32:0c:f4:73:d8:d4:28:10: 43:ad:c8:08:02:31:cb:ab:07:f0:ed:bd:f8:8d:74:b4:57:e5: 1a:9e:1c:65:16:9d:15:b7:b2:db:b0:cd:e2:53:15:02:9c:74: 8d:12:78:67:35:d9:54:40:2a:c3:65:ea:de:36:c6:28:00:17: 1c:e7:7a:eb:5e:b5:35:38:01:7c:63:c0:e9:9c:76:c5:0b:23: 3f:ef:f5:88:61:da:46:a7:22:20:50:0a:08:9b:66:0b:1f:b9: 75:a0:8f:37:72:46:89:e7:5c:69:e9:b3:c9:8f:06:3c:60:44: a6:7a:e8:da:c7:02:f9:68:74:29:68:f6:b3:e3:73:46:d7:51: 07:86:92:0d:53:f2:ea:af:6c:df:32:19:3c:6f:5d:f5:07:fb: 80:ef:ce:0d:3b:cd:b9:16:74:96:65:39:a7:4a:83:10:a7:b9: 81:fa:af:bf:3d:30:15:6d:dc:0b:91:46:98:c8:b4:0e:69:7d: e5:6a:aa:76:42:22:3b:2d:08:d5:c2:ec:dc:75:dd:61:f9:c6: 28:82:57:31:ea:82:01:ae:08:eb:8f:c1:a5:81:9b:38:72:49: ad:b0:c7:0f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZr+j4PjyD+Ix5usdsOuubT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4 ZjYzMTAwHhcNMjUxMjA4MTUyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmViMjYwZWMzYmM1MzBmZjI0OTJiMzY4NDQzZDBmODdkNzcxNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQFR5VwQWymrp4zQTXsUyvMegM+ 1QStd8u2YXRjO00DyNseFxU1TuKkgTrQUdR6WLKsWb5Zhzg3nzBW2B8bcDMbNBo5 5Lb2Ufi+vUUs+ZpiwNiRnP1ovFFHXdlWjol5/WtWVATEgdDC+ERv2yQxXfr17s43 PcSpCI5PHF4on78ahGvdBE7mtQ4wYarfKpIsloOdN3FmCccYIl1O0SL80FXHvdxx h1zHyyGtX1vMLZMiBTcoPexcsdJTMQBgVxqunUdbQL3Xn9Z6pKkr02bugaV9AH0t R9zTmW8WBNjNTpxpOtemMnR1u1y6lHEw4oVKzgbZwPsxCtEV0dg3BjMUkQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFJLrJg7DvFMP8kkrNoRD0Ph9dxWDMB8GA1UdIwQY MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt YjMxNmRiNTkzOGZmLzEva3VzbURzTzhVd195U1NzMmhFUFEtSDEzRllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwMBJR4DAwEu zAMEBT6YgAMEBVPcYAMDArK0AwMBvJIDBAXVnsAwDQQCAAIwBwMFAyABG4AwDQYJ KoZIhvcNAQELBQADggEBACrJRddMSuJ/V5wN+fzOibuTzDe6xgixAKNg4KMyDPRz 2NQoEEOtyAgCMcurB/DtvfiNdLRX5RqeHGUWnRW3stuwzeJTFQKcdI0SeGc12VRA KsNl6t42xigAFxzneutetTU4AXxjwOmcdsULIz/v9Yhh2kanIiBQCgibZgsfuXWg jzdyRonnXGnps8mPBjxgRKZ66NrHAvlodClo9rPjc0bXUQeGkg1T8uqvbN8yGTxv XfUH+4Dvzg07zbkWdJZlOadKgxCnuYH6r789MBVt3AuRRpjItA5pfeVqqnZCIjst CNXC7Nx13WH5xiiCVzHqggGuCOuPwaWBmzhySa2wxw8= -----END CERTIFICATE-----Generated at Fri Dec 12 00:56:39 2025 by rpki-client